【求助】为什么老会自动安装第3方工具栏?

是该死的网密。
用卡卡清楚掉,第2天开机的时候有见了。
也没开过什么乱七八糟的网站,用瑞星扫描也没发现有病毒。
谁来救救我啊?
下面是日志:
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
F:\工具\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
F:\工具\Rising\Rav\Ravmond.exe
f:\工具\rising\rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
f:\工具\rising\rfw\RfwMain.exe
C:\WINDOWS\SOUNDMAN.EXE
F:\工具\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\nvsvc32.exe
F:\工具\DAEMON Tools\daemon.exe
F:\工具\Rising\Rav\RavTask.exe
F:\工具\Rising\Rav\Ravmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\其他工具\HijackThis.exe

R3 - URLSearchHook: (no name) - {982CB676-38F0-4D9A-BB72-D9371ABE876E} - (no file)
R3 - URLSearchHook: SgUrlSearHook Class - {BAB1AC41-6FF7-4F2E-A04E-5C592CCFEA7D} - C:\WINDOWS\system32\socul.dll
O2 - BHO: MAngle Class - {9A556B8F-FD02-420E-A1FD-9DB33808254E} - C:\Program files\MySec\secmousej3cim0.dll
O3 - Toolbar: My 网蜜(&M) - {102293E4-758B-4483-946B-714EBCEC91B8} - C:\Program files\MySec\secbarj3cilv.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DAEMON Tools] "F:\工具\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [RavTask] "F:\工具\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SECUPDATE] C:\Program Files\MySec\secupdateaan.exe -sv
O4 - HKLM\..\Run: [RfwMain] "F:\工具\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: !直接打开链接 - res://C:\Program files\MySec\secmousej3cim0.dll/seopenurl.html
O8 - Extra context menu item: &使用迅雷下载 - F:\工具\xunlei\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - F:\工具\xunlei\Program\GetAllUrl.htm
O8 - Extra context menu item: 使用百度搜索 - res://C:\Program files\MySec\secmousej3cim0.dll/sesch_bd.html
O8 - Extra context menu item: 加入365MY收藏夹(&U) - http://www.365my.com/rclick/add_url.php
O8 - Extra context menu item: 加入365MY网摘(&N) - http://www.365my.com/rclick/add_net.php
O9 - Extra button: My网蜜 - {102293E4-758B-4483-946B-714EBCEC91B8} - C:\Program files\MySec\secbarj3cilv.dll
O9 - Extra 'Tools' menuitem: My网蜜 - {102293E4-758B-4483-946B-714EBCEC91B8} - C:\Program files\MySec\secbarj3cilv.dll
O16 - DPF: {A8C3B40D-5384-44AD-ACC4-504B4D8A85F5} (BoBo_V2 Control) - http://www.0288.com/BoBo_ActiveX_V2.ocx
O16 - DPF: {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} (photo_uploader Control) - http://upload.photo.163.com/photoup.cab
O16 - DPF: {F138084D-84D7-48CD-BEA8-04772457516E} (VqqSpeedDlProxy Class) - http://59.36.97.38/jsxz/vqqsdl1009.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{60E1273F-4DEA-4876-B09E-D421E7A80B00}: NameServer = 202.103.224.68 202.103.225.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA2F6CC5-9883-48A4-8A79-4C4AEC72B007}: NameServer = 202.103.224.68
O20 - AppInit_DLLs: C:\WINDOWS\system32\SoDAHK.DLL
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: P4P Service - Sohu.com Inc. - C:\Program Files\Common Files\Sogou PXP\p2psvr.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\工具\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\工具\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\工具\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\工具\Rising\Rav\Ravmond.exe
O23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\system32\wdfmgr.exe (file missing)

最后编辑2006-08-02 10:24:36